Commit 5c6f76da authored by Bodo Möller's avatar Bodo Möller
Browse files

fix support for receiving fragmented handshake messages

parent 4636341b

CHANGES

+20 −0
Changes for CHANGES: 20 added lines, 0 removed lines.
Original line number Diff line number Diff line
@@ -4,6 +4,13 @@ 


 Changes between 0.9.8d and 0.9.8e  [XX xxx XXXX]



  *) Have SSL/TLS server implementation tolerate "mismatched" record

     protocol version while receiving ClientHello even if the

     ClientHello is fragmented.  (The server can't insist on the

     particular protocol version it has chosen before the ServerHello

     message has informed the client about his choice.)

     [Bodo Moeller]



  *) Add RFC 3779 support.

     [Rob Austein for ARIN, Ben Laurie]
@@ -1016,6 +1023,19 @@ 
     differing sizes.

     [Richard Levitte]



 Changes between 0.9.7l and 0.9.7m  [xx XXX xxxx]



  *) Have SSL/TLS server implementation tolerate "mismatched" record

     protocol version while receiving ClientHello even if the

     ClientHello is fragmented.  (The server can't insist on the

     particular protocol version it has chosen before the ServerHello

     message has informed the client about his choice.)

     [Bodo Moeller]



  *) Load error codes if they are not already present instead of using a

     static variable. This allows them to be cleanly unloaded and reloaded.

     [Steve Henson]



 Changes between 0.9.7k and 0.9.7l  [28 Sep 2006]



  *) Introduce limits to prevent malicious keys being able to

ssl/d1_pkt.c

+1 −5
Changes for ssl/d1_pkt.c: 1 added line, 5 removed lines.
Original line number Diff line number Diff line
@@ -533,11 +533,7 @@ again: 
		n2s(p,rr->length);



		/* Lets check version */

		if (s->first_packet)

			{

			s->first_packet=0;

			}

		else

		if (!s->first_packet)

			{

			if (version != s->version)

				{

ssl/s23_clnt.c

+0 −1
Changes for ssl/s23_clnt.c: 0 added lines, 1 removed line.
Original line number Diff line number Diff line
@@ -574,7 +574,6 @@ static int ssl23_get_server_hello(SSL *s) 
	if (!ssl_get_new_session(s,0))

		goto err;



	s->first_packet=1;

	return(SSL_connect(s));

err:

	return(-1);

ssl/s23_srvr.c

+0 −1
Changes for ssl/s23_srvr.c: 0 added lines, 1 removed line.
Original line number Diff line number Diff line
@@ -565,7 +565,6 @@ int ssl23_get_client_hello(SSL *s) 
	s->init_num=0;



	if (buf != buf_space) OPENSSL_free(buf);

	s->first_packet=1;

	return(SSL_accept(s));

err:

	if (buf != buf_space) OPENSSL_free(buf);

ssl/s3_pkt.c

+1 −5
Changes for ssl/s3_pkt.c: 1 added line, 5 removed lines.
Original line number Diff line number Diff line
@@ -277,11 +277,7 @@ again: 
		n2s(p,rr->length);



		/* Lets check version */

		if (s->first_packet)

			{

			s->first_packet=0;

			}

		else

		if (!s->first_packet)

			{

			if (version != s->version)

				{